WordPress security by component

GetContentFromURL

Plugin description

GetContentFromURL is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 14, 2026; the highest CVE/CNA score is 7.2.

Plugin slug: getcontentfromurl

Latest vulnerability

CVE-2025-14613: GetContentFromURL: Server-side request forgery

GetContentFromURL is affected by server-side request forgery. Exploitation requires at least contributor-level access. The vulnerable server can be induced to make attacker-selected network requests.

PublishedJan 14, 2026

Safe version guidanceSee mitigation notes

		Safe version
Jan 14, 2026	CVE-2025-14613 GetContentFromURL: Server-side request forgery GetContentFromURL is affected by server-side request forgery. Exploitation requires at least contributor-level access. The vulnerable server can be induced to make attacker-selected network requests.	See mitigation notes	CVE7.2 NVDPending